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DETAILED ACTION 

Response to Amendment 
This office action is in response to amendment filed on 10/18/2004. Original application 
contained Claims 3 1-48. Applicant cancelled claims 35 and 44, and amended claims 3 1 and 40. 
The amendment filed on 10/18/2004 have been entered and made of record. Therefore, presently 
pending claims are 3 1-34, 36-43, and 45-48. 

Response to Arguments 

Applicant's arguments filed 10/18/2004 have been fully considered but they are not 
persuasive because of following reasons. 

Applicant argued that Klemba fails to disclose controlling cryptographic functions of an 
application program by accessing a policy file. This is not found persuasive due to the definition 
provided by the Microsoft Press Computer Dictionary of a file. The definition of a file is a 
complete named collection of information such as a program a set of data used by a basic unit of 
storage that enables a computer to distinguish one set of information from another. Klemba 
discloses a policy that involves the personalization of the NFCs (column 5 lines 64-67) and 
therefore enables a computer to distinguish one set of information from another. The NFC 
contains set of data used to enforce the policies of a state (column 3 lines 13-37). Therefore the 
data used describe the policy can be described as a file of data. 

Therefore, the examiner asserts that Klemba does teach or suggest the subject matter 
broadly recited in independent Claims 31 and 40. Dependent Claims 32-34, 36-39, 41-43, and 
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45-48 are also rejected at least by virtue of their dependency on independent claims and by other 
reason set forth in this office action. Accordingly, rejections for claims 31-34, 36-43, and 45-48 
are respectfully maintained. 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 31, 38-39, 40, and 47-48 rejected under 35 U.S.C. 103(a) as being unpatentable 
over Klemba et al (5,651,068) in view of the Microsoft Press Computer Dictionary. 

In reference to claim 31 and 40, Klemba an apparatus and method for controlling 
cryptographic functions of an application program wherein the processor is configured to access 
a policy that reflects a state associated with the policy (column 6 line 20 in combination with 
column 7 lines 19-24) and that includes an attribute portion configured to store one or more 
cryptographic policy attributes and a value portion having one or more attribute values, each 
attribute value corresponding to a cryptographic policy attribute and indicating whether an 
application program may use the cryptographic policy represented by the cryptographic policy 
attribute (column 6 lines 16-46). The information provided by the NFC during the initialization 
messages indicates attributes used by the policy. Further the processor selectively retrieves at 
least one of encryption information and decryption information from the policy file (column 6 
line 58 to column7 line 18). The NFC retrieves the encryption algorithm for the CU to carry out 
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the encryption (column 6 lines 27) and a back door for a third party to decrypt (column 7 lines 1- 
16). Further the processor selectively processes the retrieved encryption information and 
decryption information from the policy file in accordance with a predetermined capability 
condition and provides at least one of allowable encryption levels and decryption levels to the 
application program (column 5 lines 47-55). 

Although Klemba discloses a cryptographic policy that collects data, Klemba does not 
expressly disclose that the policy is a file. 

The Microsoft Press Computer Dictionary describes a file as named collection of 
information, such as a program, a set of data used by a program, or a user-created document. A 
file is the basic unit of storage that enables a computer to distinguish one set of information from 
another (page 194 definition of file). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to describe the policy in the NFC of Klemba as the claimed policy file. One of 
ordinary skill in the art would have been motivated to do this because a file is a collection of data 
and the information stored on the NFC is a collection of data that is used by the CU. Klemba 
discloses a policy that involves the personalization of NFC (column 5 lines 64-67) therefore the 
personalized policy information is distinguished from other personalized policy information. 
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In reference to claims 38 and 47, wherein each of the cryptographic policy attributes an 
indication of the cryptographic capabilities of the application program (column 5 lines 3 1-46), 
and each of the attribute values is one of a string, an integer number, and a truth expression 
(column 6 lines 16-45). 

In reference to claims 39 and 48, wherein the truth expression is one of a true flag, a false 
flag, and a conditional flag (column 6 lines 16-46). 

Claims 32-33 and 41-42 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Klemba as applied to claims 3 1 and 40 above, and further in view of Anderl et al (WO 
87/07063). 

Klemba does not expressly disclose the policy file comprising a JAVA archive file.. 

Anderl discloses the storage of multiple files on a smart card (page 2 lines 19-29). JAR 
files are Java class files. A smart card can contain multiple files as evidenced by Anderl; 
therefore can contain JAR files. The JAR files may contain digital signatures which are used for 
security as the files in Anderl that are credentials used for security. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to keep multiple files as in the file of Anderl in the system of Klemba. One of 
ordinary skill in the art would have been motivated to do this because the amount of files stored 
in a smart card is only limited by the amount of memory made available in the smart card,. In 
addition the policy of Klemba can be divided into sub domain and files are a convenient method 
of organizing data. 
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In reference to claims 33 and 42, wherein the policy file comprises multiple component 
files, at least one of the component files storing some of the attribute portions and attribute 
values. 

Although Klemba discloses the a states policies having sub domains (column 5 lines 31- 
55), Klemba does not discloses the policy being stored in multiple files 

Anderl discloses the storage of multiple files on a smart card (page 2 lines 19-29). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to keep multiple files as in the file of Anderl in the system of Klemba. One of 
ordinary skill in the art would have been motivated to do this because the amount of files stored 
in a smart card is only limited by the amount of memory made available in the smart card. In 
addition the policy of Klemba can be divided into sub domain and files are a convenient method 
of organizing data. 

Claims 36-37 and 45-48 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Klemba and Microsoft Press Computer Dictionary as applied to claims 3 1 and 40 above, and 
further in view of and Schneier. 

In reference to claims 36 and 45, although Klemba discloses the authentication of the 
NFC with the NCC and therefore a form of security, Klemba does not disclose a form of security 
including a digital signature portion including at least one digital certificate for ensuring that the 
policy file has not been modified. 

Schneier discloses the use of digital signatures to secure documents and make them 
unalterable (page 37 and 38) 
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At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use digital signatures as in Schneier to secure the policies of Klemba. One of 
ordinary skill in the art would have been motivated to do this because it would ensure that the 
policy has not been altered and therefore encryption that is illegal in that nation-X is 
discouraged. 

In reference to claims 37 and 46, wherein the signature portion applies to the policy file. 
The signature disclosed by Schneier refers to the part of the document that should not be altered 
in this case it would include the policy. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W Klimach whose telephone number is (571) 272-3854. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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